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A Convention for Human-Readable 128-bit Keys 
Status of this Memo 


This memo provides information for the Internet community. This memo 
does not specify an Internet standard of any kind. Distribution of 
the memo is unlimited. 


Introduction 


The Internet community has begun to address matters of security. 
Recent standards, including version 2 of SNMP [GM93], have explicit 
requirements for an authentication mechanism. These require use of a 
keyed message-digest algorithm, MD5 [Riv92], with a key size of 128- 
bits. A 128-bit key, while sufficiently strong, is hard for most 
people to read, remember, and type in. This memo proposes a 
convention for use with Internet applications & protocols using 128- 
bit cryptographic keys. 


A Solution Already Exists 


The S/Key(tm) one-time password system [Hal94] uses MD4 (and now MD5, 
as well) to compute one-time passwords. It takes the 128-bit result 
of MD4 and collapses it to a 64-bit result. Despite the size 
reduction, 64-bit one-time passwords are still difficult for ordinary 
people to remember and enter. The authors of S/Key devised a system 
to make the 64-bit one-time password easy for people to enter. 


Their idea was to transform the password into a string of small 
English words. English words are significantly easier for people to 
both remember and type. The authors of S/Key started with a 
dictionary of 2048 English words, ranging in length from one to four 
characters. The space covered by a 64-bit key (2%64) could be 
covered by six words from this dictionary (2%66) with room remaining 
for parity. For example, an S/Key one-time password of hex value: 


EB33 F77E E73D 4053 
would become the following six English words: 


TIDE ITCH SLOW REIN RULE MOT 
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Because of the need for interoperability, it is undesirable to have 
different dictionaries for different languages. Also, the current 

dictionary only uses characters from the invariant portion of ISO- 

646. Finally, there is an installed base of users and applications 
with this dictionary. 


The Proposal 


The code (see Appendix A) which S/Key uses to convert 64-bit numbers 
to six English words contains two primitives which perform 


conversions either way. The primitive btoe(char *engout,char *c) 
takes a 64-bit quantity referenced by c and places English words in 
the string referenced by engout. The primitive etob(char *out,char 


*e) performs the opposite with an input string of English words 
referenced by e, and by placing the 64-bit result into the buffer 
referenced by out. 
The aforementioned primitives can be applied to both halves of a 
128-bit key, or both halves of a string of twelve English words. Two 
new primitives (see Appendix B), key2eng(char *engout,char *key) and 
eng2key (char *keyout, char *eng) serve as wrappers which call the 
S/Key primitives twice, once for each half of the 128-bit key or 
string of twelve words. 
For example, the 128-bit key of: 
CCAC 2AED 5910 56BE 4F90 FD44 1C53 4766 
would become 
RASH BUSH MILK LOOK BAD BRIM AVID GAFF BAIT ROT POD LOVE 
Likewise, a user should be able to type in 
TROD MUTE TAIL WARM CHAR KONG HAAG CITY BORE O TEAL AWL 
as a key, and the machine should make the translation to: 
EFF8 1F9B FBC6 5350 920C DD74 16DE 8009 
If this proposal is to work, it is critical that the dictionary of 
English words does not change with different implementations. A 


freely redistributable reference implementation is given in 
Appendices A and B. 
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Security Considerations 


This document recommends a method of representing 128-bit keys using 
strings of English words. Since the strings of English words are 
easy to remember, people may potentially construct easy-to-guess 
strings of English words. With easy-to-guess strings comes the 
possibility of a sentential equivalent of a dictionary attack. In 
order to maximize the strength of any authentication mechanism that 
uses 128-bit keys, the keys must be sufficiently obscure. In 
particular, people should avoid the temptation to devise sentences. 
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Appendix A - Source for S/Key 8-bytes to/from Words Routines 


/* 


Human-Readable 128-bit Keys 


available in the directory 
ftp://thumper.bellcore.com/pub/nmh 


It has been modified only to remove explicit S/Key (TM) 


December 1994 


This code originally appeared in the source for S/Key(TM), 


(put.c) 


references. 


unsigned long extract __ARGS((char *s,int start,int length)); 
void standard __ARGS( (char *word)); 


void insert __ARGS((char *s, 


*/ 
#include <stdio.h> 
#include <string.h> 
#include <assert.h> 
#include <ctype.h> 
#ifdef _ STDC__ 
#define __ARGS(x) x 
#else 
#define __ARGS(x) () 
#endif 
static 
static 
static 
static 


int x, 


int start, 


int wsrch __ARGS((char *w,int low,int high) ); 


/* Dictionary for integer-word translations */ 


char Wp[2048][4] = { 
"AGO", "AID", "AIM", 
" AND " 7 " ANN " å " ANT " y 
"ARM", "ART", "AS m 
" AWE " 7 " AWK " ? " AWL " > 
" BAN " E " BAR " ; " BAT " 7 
"BEY", "BIB", "BID", 
" BOP " z " BOW " ; " BOY " s 
" BUY " å " BY " j " BYE " 7 
"CAW", "COD", "COG", 
TORY T3 "CUB", "CUE", 
" DAR " y " DAY " F " DEE " > 
"DIN", "DIP", "DOM 
"DUD", " DUE", "DUG", 
"ELI Sy "ELK", "ELM", 
" EWE " F " EYE " A " FAD " ; 
"FIB", "FIG", "FIN", 
"FRY", "FUM", "FUN", 
"GAS ke? "GAY", "GEE my 
" GOT " 7 " GUM " J " GUN " ; 
" HAL " 7 " HAM " A " HAN " ; 
" HEN " , " HER" P " HEW " , 
McDonald 


int length) ); 


"a" F "ABE " y "ACE " 7 TACT: " y "AD " ; "ADA" y "ADD " z 
"ATR" "ALL " "ALP " "AM" "AMY " "AN " "ANA" 
" ANY " I " APE " Å " AP S " å " APT 4 å " ARC å 7 " ABH " > " XRK " ; 
"ASH", "ASK", WAQ TATE 5 "AUG", "AUK", " VE", 
" AWN " + " AX " å " AYE " 4 " BAD " 7 " BAG " ; " BAH " A " BAM " > 
"BAY", "BE Ta "BED ee "BEE = "BEG", "BEN", "BET Wy 
"BIG", "BIN", "BIT"; "BOB", "BOG", "BON", "BOO", 
" BUB " F " BUD " ; "BUG " ; " BUM" 7 " BUN " ; " BUS " ; " BUT " ; 
" CAB " > " CAL " > " CAN " A " CAN " , " CAP " å " CAR " 7 " CAT " A 
"COLT "CON" "Coo" "COP " "COT " "COW" "coy" 
" CUP " J " CUR" Í O: UT " å " DAB " å " DAD " ; " DAM" ; " DAN " Å 
"DEL", "DEN", "DES", "DEW", "DID", "DIE", "DIG", 
"DOE" "DOG", "DON", "DOT", "DOW", "DRY", "DUB", 
"DUN", "EAR", "EAT", "ED", " EEL", "EGG", "EGO", 
"ELY", "EM", "END", "EST", "ETG", "EVA", "EVE", 
"FAN", "FAR", "FAT "y TRAV "FED my "FEE Mi "FEW", 
"FIR", "FETT", "FLO", BEY", "FOE", "FOG", "FOR", 
" FUR " ; " GAB " y " GAD " A " GAG " å " GAL " , " GAM " 7 " GAP " å 
"GEL", "GEM", "GET", "GIG", "GIL", "GIN", "GO", 
" GUS " pr " GUT " 7 " GUY " å " GYM" A " GYP " 7 " HA" å " HAD " " 
" HAP " 7 " HAS " y " HAT " på " HAW " y " HAY " 7 " HE " A " HEM " ; 
"HEY"; "ar", "HID", "HIM", "HIP", "BES" THTT Yy 
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" HO " A " HOB " A " HOC " på " HOE " y " HOG " , " HOP " y " HOT " p " HOW " y " HUB " A " HUE " ; 
"HUG", "HUH", "HUM", "HUT", si ea TCX =; "TDA", W FS; "IKE", "ILL 
"INK", "INN", TOT, "TON", TEOM; "IRA", "TRE", "TRK", TVIST, "TET, "LES" 
" IVY " y " JAB " 7 " JAG " 7 " JAM " j " JAN " 7 " JAR " P " JAW " 7 " JAY " > " JET " $ " JIG" ; 

" JIM" 7 " JO " m " JOB " 7 " JOE " 7 " JOG " 7 " JOT " å " JOY " j " JUG " å " JUT " å " KAY " > 
"KEG", "KEN", "KEY", "KID", "KIM", "KIN", "KIT", "LA", "LAB", LAS 

" LAD " > " LAG " ; " LAM" y " LAP " 7 " LAW " y " LAY " í " LEA" y " LED " ; " LEE " > " LEG " 7 
"LEN", "LEO", "LET", "LEW", "TED, "LIE", "LIN", "LIP", ETT", "Lo", 

" LOB " 7 " LOG " ? " LOP " ; " LOS " 7 " LOT " A " LOU " 7 " LOW " å " LOY " 7 " LUG " F " LYE " ; 
"MA" 7 "MAC " ; "MAD " 7 "MAE " $ "MAN " 7 "MAO " på "MAP " 7 "MAT " 7 " MAW " A " MAY " ; 
"ME", "MEG", "MEL", "MEN", "MET", "MEW", "MID", "MIN", "MIT", "MOB", 
"MOD " ; " MOE " P " MOO " 4 " MOP " y "MOS " y " MOT " 7 "MOW " j "MUD " 7 "MUG " y "MUM" P 
"MY", "NAB", "NAG", "NAN", "NAP We "NAT Gi "NAY", "NE", "NED ur "NEE ee 
"NET", "NEW", "NIB", "NIL", "NIP", "NIT", "NO", "NOB", "NOD", "NON", 

" NOR" ; " NOT " j " NOV" f " NOW " på " NU " 7 "NUN " ; " NUT " , " O " ï " OAF " 7 " OAK " ; 
"OAR", "OAT™ ; "ODD", "ODE", "OF My "OFF my "OF TD "OHT OTLET; "OK", 

" OLD " z " ON " > " ONE " y " OR" s " ORB " 7 " ORE " $ " ORR" y " OS " y " OTT " > " OUR" ; 

" OUT " 7 " OVA" 7 " OW " ; " OWE " , " OWL " F " OWN " y " OX " p " PA" y " PAD " i " PAL " ; 

" PAD " z " PAN " , " PAP " y " PAR" ; " PAT " z " PAW " A " PAY " ; " PEA" ; " PEG " $ " PEN " P 
"PEP", "PER", "PET", "PEW", "PHI", "PI", "PIE", "PIN", "PIT", "PLY", 
"PO", "POD", "POE", "POP", "POT", "POW", "PRO", "PRY", "PUB", "PUG", 
"PUN", "PUP", "PUL", "QUO", "RAG", " M", "RAN", "RAP", "RAT", "RAW", 
"RAY", "REB", "RED", "REP kr "RET", "RIB", "RID", "RIG", "RIM", "RIO, 

" RIP " 7 " ROB " Z " ROD " > " ROE " ; " RON " ; " ROT " 7 " ROW " 7 " ROY " F " RUB " ; " RUE " F 

" RUG " 7 " RUM" A " RUN " > " RYE " $ " SAC " 4 " SAD " > " SAG " y " SAL " y " SAM" å " SAN " 7 

" SAP fae " SAT", " SAW", " SAY", " SEA", " SEC", "SEE" "SEN", " SET", " SEW", 
"SHE", "SHY", "SIN", "SIP", "SIR", TS ES y "SIT", "SKI", "SKY", TSL" 
SOT} "SOB", "SOD", "SON", "SOP", "SOW", "SOY"; ESPA"; "SPY", "SUB", 
"SUD", "SUB", "SUM", "SUN", "SUP", "TAB"; "TAD", "TAG", "TAN", "TAP", 
"TAR", "THAT, TED, "TEE", "TEN", "THE", DAY y TELC TERES? "TIM", 
"TIN", "TIP mo TOT; "TOR", "TOG! "TOM", "TON", "TOO", "TOP ms "TOW", 
"TOY", TRY"; "TUB", "TUG", "TUM", "TUN", "TWO", "UN", "UP wy "US My 

"USE T "VAN", "VAT ee "VET "> "VIE "g "WAD m; "WAG", "WAR", "WAS Ya "WAY", 
"WE", "WEB", "WED", "WEE", "WET", "WHO", "WHY", "WIN", "WIT", "WOK", 

" WON " 7 " WOO " Z " WOW " > " WRY " > " WU " " YAM " A " YAP " , " YAW " ; " YE " j " YEA " 7 
"YES", "YET", "YOU", "ABED", "ABEL", "ABET", "ABLE", "ABUT", "ACHE", 
"ACID", "ACME", "ACRE", "ACTA", "ACTS", "ADAM", "ADDS", "ADEN", "AFAR", 
"AFRO", "AGEE", "AHEM", "AHOY", "AIDA", "AIDE", "AIDS", "AIRY", "AJAR", 
"AKIN", "ALAN", "ALEC", "ALGA", "ALIA", "ALLY", "ALMA", "ALOE", "ALSO", 
"ALTO " y "AL UM" y "ALVA" > "AMEN" y "AMES " y "AMID " y " MO " y "AMOK" > "AMOS " y 
" AMRA " r " ANDY " 7 " ANEW " på " ANNA " y " ANNE " y " ANTE " 7 " ANT I " j " AQ UA " å " ARAB " å 
"ARCH", "AREA", "ARGO", "ARID", "ARMY", "ARTS", "ARTY", "ASIA", "ASKS", 
"ATOM" Pp "AUNT " $ "AURA" "AUTO " j "AVER" på "AVID " j "AVI S " 5 "AVON " z "AVOW " dr 
"AWAY", "AWRY", "BABE", "BABY", "BACH", "BACK", "BADE", "BAIL", "BAIT", 
"BAKE", "BALD", "BALE", "BALI", "BALK", "BALL", "BALM", "BAND", "BANE", 
"BANG", "BANK", "BARB", "BARD", "BARE", "BARK", "BARN", "BARR", "BASE", 
"BASH", "BASK", "BASS", "BATE", "BATH", "BAWD", "BAWL", "BEAD", "BEAK", 
" BEAM" 7 " BEAN " f " BEAR" , " BEAT " f " BEAU " 7 " BECK " , " BE EF " , "B H EN " "B El ER" 7 
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"BEET", "BELA", "BELL", "BELT", "BEND", "BENT", "BERG", "BERN", "BERT", 
"BESS", "BEST", "BETA", "BETH", "BHOY", "BIAS", "BIDE", "BIEN", "BILE", 
"BILK", "BILL", "BIND", "BING", "BIRD", "BITE", "BITS", "BLAB", "BLAT", 
"BLED" "BLEW" F "BLOB" 7 "BLOC" y "BLOT" y "BLOW" ; "BLUE" ; "BLUM" ; "BLUR" ; 
"BOAR", "BOAT", "BOCA", "BOCK", "BODE", "BODY", "BOGY", "BOHR", "BOIL", 
"BOLD", "BOLO", "BOLT", "BOMB", "BONA", "BOND", "BONE", "BONG", "BONN", 
"BONY", "BOOK", "BOOM", "BOON", "BOOT", "BORE", "BORG", "BORN", "BOSE", 
"BOSS" F "BOTH" j "BOUT" F "BOWL" F "BOYD" y "BRAD" ; "BRAE" ; "BRAG" F "BRAN" ; 
"BRAY", "BRED", "BREW", "BRIG", "BRIM", "BROW", "BUCK", "BUDD", "BUFF", 
"BULB", "BULK", "BULL", "BUNK", "BUNT", "BUOY", "BURG", "BURL", "BURN", 
"BURR", "BURT", "BURY", "BUS H", "BUSS", "BUST", "BUSY", "BYTE", “CADA 
"CAFE", "CAGE", "CAIN", "CAKE", "CALF", "CALL", "CALM", "CAME", "CANE", 
"CANT", "CARD", "CARE", "CARL", "CARR", "CART", "CASE", "CASH", "CASK", 
"CAST", "CAVE", "CEIL", "CELL", "CENT", "CERN", "CHAD", "CHAR", "CHAT", 
"CHAW", "CHEF", "CHEN", "CHEW", "CHIC", "CHIN", "CHOU", "CHOW", "CHUB", 
"CHUG", "CHUM", “CITE”, "CITY" "CLAD", "CLAM", "CLAN", "CLAN", "CLAY", 
"CLOD", "CLOG", "CLOT", "CLUB", "CLUE", "COAL", "COAT", "COCA", "COCK", 
"COCO", "CODA", "CODE", "CODY", "COED ™, "COLE", "COIN, "COKE", "COLA", 
"COLD", "COLT", "COMA", "COMB", "COME", "COOK", "COOL", "COON", "COOT", 
"CORD", "CORE", "CORK", "CORN", "COST", "COVE", "COWL", "CRAB", "CRAG", 
"CRAN My "CRAY", "CREW", "CRIB", "CROW", "CRUD", "CUBA", "CUBE", "CUFF", 
"CULL", "CULT", "CUNY", "CURB", "CURD", "CURE", "CURL", "CURT", "CUTS", 
"DADE", "DALE", "DAME", "DANA", "DANE", "DANG", "DANK", "DARE", "DARK", 
"DARN", "DART", "DASH", "DATA", "DATE", "DAVE", "DAVY", "DAWN", "DAYS", 
" DEAD", "DEAF n> " DEAL", " DEAN", " DEAR", "D BI", " DECK", "DEED", "DEEM", 
"DEER", "DEFT", "DEFY", "DELL", "DENT", "DENY", "DESK", "DIAL", "DICE", 
"DIED", "DIET", "DIME", "DINE", "DING", "DINT", "DIRE", "DIRT", "DISC", 
"DISH", "DISK", "DIVE", "DOCK", "DOES", "DOLE", "DOLL", "DOLT", "DOME", 
"DONE", "DOOM", "DOOR", "DORA", "DOSE", "DOTE", "DOUG", "DOUR", "DOVE", 
"DOWN", "DRAB", "DRAG", "DRAM", "DRAW", "DREW", "DRUB", "DRUG", "DRUM", 
" DUAL", " DUCK", "DUCT", " DUEL", "DUET", "DUKE", "DULL", " DUMB", "DUNE", 
"DUNK", "DUSK", "DUST", "DUTY", "RACH", "EARL", "EARN", "EASE", "EAST", 
"EASY", "EBEN", "ECHO", "EDDY", "EDEN", "EDGE", "EDGY", "EDIT", "EDNA", 
"EGAN", "ELAN", "ELBA", "ELLA", "ELSE", "EMIL", "EMIT", "EMMA", "ENDS", 
"ERIC", "EROS wi "EVEN", "EVER", "EVIL", " EYED", "FACE", "FACT", "FADE", 
"FAIL", "FAIN", "FAIR", "FAKE", "FALL", "FAME", "FANG", "FARM", "FAST", 
"FATE", "FAWN", "FEAR", "FEAT", "FEED", "FEEL", "FEET", "FELL", "FELT", 
"PEND", "FERN", "FEST", "FEUD", "FIEF", "FIGS", "FILE", "FILL", "FILM", 
"FIND", "FINE", "FINK", "FIRE", "FIRM", "FISH", "FISK", "FIST", "FITS", 
"FIVE", "FLAG", "FLAK", "FLAN ua "FLAT", "FLAW", "E LEA", "E LED" "E LEW", 
"ELIT", "FLOC", "FLOG", "FLOW", "FLUB", "FLUE", "FOAL", "FOAM", "FOGY", 
"FOIL", "FOLD", "FOLK", "FOND", "FONT", "FOOD", "FOOL", "FOOT", "FORD", 
"FORE", "FORK", "FORM", "FORT", "FOSS", "FOUL", "FOUR", "FOWL", "FRAU", 
"FRAY", "FRED", "FREE", "FRET", "FREY", "FROG", "FROM", "FUEL", "FULL", 
"FUME", "FUND", "FUNK", "FURY", "FUSE", "FUSS", "GAFF", "GAGE", "GAIL", 
"GAIN", "GAIT", "GALA", "GALE", "GALL", "GALT", "GAME", "GANG", "GARB", 
"GARY", "GASH", "GATE", "GAUL", "GAUR", "GAVE", "GAWK", "GEAR", "GELD", 
"GENE", "GENT", "GERM", "GETS", "GIBE", "GIFT", "GILD", "GILL", "GILT", 


(zal 


E 


T 
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"GINA", "GIRD", "GIRL", "GIST", "GIVE", "GLAD", "GLEE", "GLEN", "GLIB", 
"GLOB", "GLOM", "GLOW", "GLUE", "GLUM", "GLUT", "GOAD", "GOAL", "GOAT", 


"GOER", "GOES", "GOLD", "GOLF", "GONE", "GONG", "GOOD", "GOOF", "GORE", 
" GORY " y " GOSH " j " GOUT " y " GOWN " i " GRAB " r " GRAD " ; " GRAY " 7 " GREG " y " GREW " s 
"GREY", "GRID", "GRIM", "GRIN", "GRIT", "GROW", "GRUB", "GULF", "GULL", 
" GUNK" di " GURU" " GUS H" 7 " GUST" $ " GWEN" å " GWYN" b " HAAG" $ " HAAS " f " HACK" $ 
"HAIL", "HATR", "HALE", "HALF", "HALL", "HALO", "HALT", "HAND", "HANG", 
" HANK", " HANS", " HARD", "HARK", " HARM", " HART", " HASH", " HAST", " HATE", 
" HATH", " HAUL", "HAVE", " HAWK", " HAYS", "HEAD", "HEAL", "HEAR", "HEAT", 
"Hg EBE" y "pH ECK" 7 "py EED" y "py BEL" 7 "HEFT " y "HELD" ; "HELL" y "HELM" y "HERB" y 
"HERD", "HERE", "HERO", "HERS", "HESS", "HEWN", "HICK", "HIDE", "HIGH", 
"HIKE", "HILL, "ALLE", "HIND", "HINT", "HIRE", HESS"; "HIVE", "HOBO", 
" HOCK" , " HOFF " , " HOLD " , " HOLE " , " HOLM" 7 " HOLT " , " HOME, " F " HONE " 7 " HONK" , 
"HOOD", "HOOF", "HOOK", "HOOT", "HORN", "HOSE", "HOST", "HOUR", "HOVE", 
" HOWE " ý " HOWL " F " HOYT " P " HUCK" P " HUED " , " HUFF " , " HUGE " , " HUGH " P " HUGO " A 
"HULK", "HULL", "HUNK", "HUNT", "HURD", "HURL", "HURT", "HUSH", "HYDE", 
" HYMN", " IBIS", " ICON", " IDEA", " IDLE", " TERRY", " INCA", " INCH", " INTO", 
" IONS T " IOTA", " IOWA", " IRIS", " IRMA", " IRON", "ISLE", " ITCH", " ITEM", 
"IVAN", "JACK", "JADE", "JAIL", "JAKE", "JANE", "JAVA", "JEAN", "JEFF", 
"JERK", "JESS", Wo, ST", "JIBE", VILLET , "IERT; "JIVE", "JOAN", mf Bs", 
"JOCK", "JOEL", "JOEY", "J HN", "JOIN", "JOKE", "JOLT", "JOVE", OST: DD", 
" E DE " 7 " JUDO " 7 " JUDY " 7 " Ji JU " 7 " JUKE " 7 " JULY " F " JUNE " 7 " JUNK " 7 " JUNO " F 
"JURY", "JUST", "JUTE", "KAHN", "KALE", "KANE", "KANT", "KARL", "KATE", 


"KEEL", "KEEN", "KENO", "KENT", "KERN", "KERR", "KEYS", "KICK", "KILL", 
"KIND", "KING", "KIRK", "KISS", "KITE", "KLAN", "KNEE", "KNEW", "KNIT", 
"KNOB", "KNOT", "KNOW", "KOCH", "KONG", "KUDO", "KURD", "KURT", "KYLE", 
"LACE", "LACK", "LACY", "LADY", "LAID", "LAIN", "LAIR", "LAKE", "LAMB", 
"LAME", "LAND", "LANE", "LANG", "LARD", "LARK", "LASS", "LAST", "LATE", 
"LAUD", "LAVA", "LAWN", "LAWS", "LAYS", "LEAD", "LEAF", "LEAK", "LEAN", 
"LEAR", "LEEK", "LEER", "LEFT", "LEND", "LENS", "LENT", "LEON", "LESK", 
TESSA, "LEST", "LETS", TLIAR", LICE", "LICR, LIED”; "LIEN", LIBS", 
"LIEU", "LIFE", "LIFT", "LIKE", "LIGA", "LILT", "LLE", "LIMA", "LIMB", 
"LIME", "LIND", "LINE", "LINK", "LINT", "LION", "LISA", "LIST", "LIVE", 
" LOAD " F " LOAF " F " LOAI " " LOAN " r " LOCK " " LOFT " y " LOGE " ; " LOI S " j " LOLA" ; 
"LONE", "LONG", "LOOK", "LOON", "LOOT", "LORD", "LORE", "LOSE", "LOSS", 
"LOST", "LOUD", "LOVE", "LOWE", "LUCK", "LUCY", "LUGE", "LUKE", "LULU", 
"LUND", "LUNG", "LURA", "LURE", "LURK", "LUSH", "LUST", "LYLE", "LYNN", 
"LYON", "LYRA", "MACE", "MADE", "MAGI "y "MATD", "MATL", "MAIN", "MAKE", 
" MALE " , " MALI " , " MALL " ' " MALT " ' " MANA " P " MANN " F " MANY " , " MARC " , " MARE " A 
"MARK", "MARS Ty "MART", "MARY", "MASH", "MASK", "MASS", "MAST", "MATE", 
" MAT H " ; "MAUL " j " MAYO " å " MEAD " j " MEAL " F " MEAN " F " MEAT " F " MEEK " w " MEET " 7 
"MELD", "MELT", "MEMO", "MEND", "MENU", "MERT", "MESH", "MESS", "MICE", 
"MIKE", "MILD", "MILE", "MILK", "MILL", "MILT", "MIMI", "MIND", "MINE", 
"MINI", "MINK", "MINT", "MIRE", "MISS", "MIST", "MITE", "MITT", "MOAN", 
"MOAT", "MOCK", "MODE", "MOLD", "MOLE", "MOLL", "MOLT", "MONA", "MONK", 
"MONT", "MOOD", "MOON", "MOOR", "MOOT", "MORE", "MORN", "MORT", "MOSS", 
"MOST", "MOTH", "MOVE", "MUCH", "MUCK", "MUDD", "MUFF", "MULE", "MULL", 
"MURK", "MUSH", "MUST", "MUTE", "MUTT", "MYRA", "MYTH", "NAGY", "NATL", 
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"NAIR", "NAME", "NARY", "NASH", "NAVE", "NAVY", "NEAL", "NEAR", "NEAT", 
"NECK", "NEED", "NEIL", "NELL", "NEON", "NERO", "NESS", "NEST", "NEWS", 
"NEWT", "NIBS", "NICE", "NICK", "NILE", "NINA", "NINE", "NOAH", "NODE", 
" NOEL " F " NOLL " r " NONE " y " NOOK " w " NOON " ; " NORM" j " NOSE " j " NOTE " F " NOUN " 
"NOVA", "NUDE", "NULL", "NUMB", "OATH", "OBEY", "OBOE", "ODIN", "OHIO", 
"OILY " $ "OINT " y " OKAY " $ " OLAF " $ " OLDY " £ " OLGA" $ " OLIN" $ " OMAN " ⁄ " OMEN " $ 
" OMIT " 7 " ONCE, " , " ONES " 7 " ONLY " , " ONTO " F " ONUS " , " ORAL " 7 " ORGY " 7 " OSLO " , 
"OTIS", "OTTO", "OUCH", "OUST", "OUTS", "OVAL", "OVEN", "OVER", "OWLY", 
"OWNS ms "QUAD", "QUIT", "QUOD", "RACE", "RACK", "RACY", "RAFT", "RAGE", 
"RAID", "RAIL", "RAIN", "RAKE", "RANK", "RANT", "RARE", "RASH", "RATE", 
"RAVE", "RAYS", "READ", "REAL", "REAM", "REAR", "RECK", "REED", "REEF", 
"REEK", "REEL", "REID", "REIN", "RENA", "REND", "RENT", "REST", "RICE", 
"RICH", "RICK", "RIDE", "RIFT", "RILL", "RIME", "RING", "RINK", "RISE", 
"RISK", "RITE", "ROAD", "ROAM", "ROAR", "ROBE", "ROCK", "RODE", "ROIL", 
"ROLL", "ROME", "ROOD", "ROOF", "ROOK", "ROOM", "ROOT", "ROSA", "ROSE", 
"ROSS", "ROSY", "ROTH", "ROUT", "ROVE", "ROWE", "ROWS", "RUBE", "RUBY", 
"RUDE", "RUDY", "RUIN", "RULE", "RUNG", "RUNS", "RUNT", "RUSE", "RUSH", 
"RUSK", "RUSS", "RUST", "RUTH", "SACK", "SAFE", "SAGE", "SAID", "SAIL", 
" SALE " y " SALK " å " SALT " å " SAME " r " SAND " å " SANE " y " SANG " F " SANK " > " SARA" > 
" SAUL", " SAVE", " SAYS e " SCAN", " SCAR", " SCAT", " SCOT™, " SEAL", " SEAN ae 
"SEAR", "SEAT", "SEED", "SEEK", "SEEM", "SEEN", "SEES", "SELF", "SELL", 
"SEND", "SENT", "SETS”, "SEWN", "SHAG", "SHAM", "SHAW", "SHAY", "SHED", 
"SHIM", "SHIN", "SHOD", "SHOE", "SHOT", "SHOW", "SHUN", "SHUT", "SICK", 
"SIDE", SEPT", "SIGH", "SIGN"; "SILK", "SILL", "SILO", "SILT", "SINE", 
"SING", "SINK", "SIRE", "SITE", "SITS", "SITU", "SKAT", "SKEW", "SKID", 
"SKIM", "SKIN", "SKIT", "SLAB", "SLAM", "SLAT", "SLAY", "SLED", "SLEW", 
"SLID", "SLIM", "SLIT", "SLOB", "SLOG", "SLOT", "SLOW", "SLUG", "SLUM", 
"SLUR", "SMOG", "SMUG", "SNAG", "SNOB", "SNOW", "SNUB", "SNUG", "SOAK", 
"SOAR", "SOCK", "SODA", "SOFA", "SOFT", "SOIL", "SOLD", "SOME", "SONG", 
"SOON", "SOOT", "SORE", "SORT", "SOUL", "SOUR", "SOWN", "STAB", "STAG", 
"STAN", "STAR", "STAY", "STEM", "STEW", "STIR", "STOW", "STUB", "STUN", 
"SUCH"; wSUDSW, "SUIT", TSULK", "SUMS; "SUNG"; "SUNK"; "SURE", “SURE, 
" SWAB", " SWAG", " SWAI mA " SWAN", " SWAT", " SWAY", " SWIM", " SWUM", "TACK", 
"TACT", "TAIL", "TAKE", "TALE", "TALK", "TALL", "TANK", "TASK", "TATE", 
"TAUT", "TEAL", "TEAM", "TEAR", "TECH", "TEEM", "TEEN", "TEET", "TELL", 
"TEND", "TENT", "TERM", "TERN", "TESS", "TEST", "THAN", "THAT", "THEE", 
"THEM", "THEN", "THEY", "THIN", "THIS", "THUD", "THUG", "TICK", "TIDE", 
TIDY" y- "TIED"; TER, LE, TILL"; PILLO, STINE, TINA", "TINE", 
TINT"; "TINY"; "TIRE", "TOAD", "TOGO", "TOIL", "TOLD", "TOLL", "TONE", 
"TONG", "TONY", "TOOK", "TOOL", "TOOT", "TORE", "TORN", "TOTE", "TOUR", 
"TOUT", "TOWN", "TRAG", "TRAN "y "TRAY", "TREE", "TREK", "TRIG", "TRIM", 
"TRIO", "TROD", "TROT", "TROY", "TRUE", "TUBA", "TUBE", "TUCK", "TUFT", 
"TUNA", "TUNE", "TUNG", "TURF", "TURN", "TUSK", "TWIG", "TWIN", "TWIT", 
"ULAN", "UNIT", "URGE", "USED", "USER", "USES", "UTAH", "VAIL", "VAIN", 
"VALE", "VARY", "VASE", "VAST", "VEAL", "VEDA", "VEIL", "VEIN", "VEND", 
"VENT", "VERB", "VERY", "VETO", "VICE", "VIEW", "VINE", "VISE", "VOID", 
"VOLT", "VOTE", "WACK", "WADE", "WAGE", "WAIL", "WAIT", "WAKE", "WALE", 
"WALK", "WALL", "WALT", "WAND", "WANE", "WANG", "WANT", "WARD", "WARM", 
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"WARN", "WART", "WASH", "WAST", "WATS", "WATT", "WAVE", "WAVY", "WAYS", 
"WEAK", "WEAL", "WEAN", "WEAR", "WEED", "WEEK", "WEIR", "WELD", "WELL", 
"WELT", "WENT", "WERE", "WERT", "WEST", "WHAM", "WHAT", "WHEE", "WHEN", 
"WHET", "WHOA", "WHOM", "WICK", "WIFE", "WILD", "WILL", "WIND", "WINE", 
"WING", "WINK", "WINO", "WIRE", "WISE", "WISH", "WITH", "WOLF", "WONT", 
" WOOD " + " WOOL " x " WORD " 5 " WORE " P " WORK " ; " WORM" j " WORN " $ " WOVE " P " WRI T " P 
"WYNN" + "YALE" ; " YANG " 7 "YANK" ; "YARD" 7 "YARN"! P "Y~AWL" ; "YAWN" F "YEAH" n 
"YEAR", "YELL", "YOGA", "YOKE" 

y; 


/* Encode 8 bytes in 'c” as a string of English words. 
* Returns a pointer to a static buffer 
*/ 
char * 
btoe (engout,c) 
char *c, *engout; 
{ 
char cp[9]; /* add in room for the parity 2 bits*/ 
int p,i ; 


engout[0] = ’\0’; 

memcpy (cp, c,8); 

/* compute parity */ 

for(p = 0,i = 0; i < 64;i += 2) 
p += extract (cp,i,2); 


cp[8] = (char)p << 6; 
strncat (engout, ¿Wp[extract (cp, 0,11)][0],4); 
strcat (engout," "); 
strncat (engout, ¿Wp[extract (cp,11,11)][0],4); 
strcat (engout," "); 
strncat (engout, ¿Wp[extract (cp, 22, 11)] [01], 4); 
strcat (engout," "); 
strncat (engout, ¿Wp[extract (cp, 33,11) 1[01,4); 
strcat (engout," "); 
strncat (engout, ¿Wp[extract (cp,44,11)][0],4); 
strcat (engout," "); 
strncat (engout, ¿Wp[extract (cp,55,11)][0],4); 
#ifdef notdef 
printf("engout is %s\n\r",engout) ; 
Hendif 
return (engout); 


} 


/* convert English to binary 

* returns 1 OK - all good words and parity is OK 
Å 0 word not in data base 

£ -1 badly formed in put ie > 4 char word 
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x -2 words OK but parity is wrong 
*/ 
int 
etob (out, e) 
char *out; 
char *e; 
{ 
char *word; 
int i, p, v,1, low,high; 
char b[9]; 
char input[36]; 


if (e == NULL) 
return -1; 


strncpy (input,e, sizeof (input) ); 
memset (b, 0, sizeof(b)); 

memset (out, 0, 8); 

for (1=0,p=0;1<6;1++,p+=11) í 


if((word = strtok(i == 0 ? input : NULL," ")) == NULL) 
return -1; 

1 = strlen (word); 

if(1>4 || 1 < 1) [ 


return -1; 
) else if(1 < 4) ( 


low = 0; 

high = 570; 
) else ( 

low = 571; 


high = 2047; 
) 
standard (word); 
if( (v = wsrch (word, low,high)) < 0 ) 
return 0; 
insert (b,v,p,11); 
} 


/* now check the parity of what we got */ 
for(p = 0, i = 0; i < 64; i +=2) 
p += extract(b, i, 2); 


if( (p & 3) != extract(b, 64,2) ) 
return -2; 


memcpy (out,b, 8); 


return 1; 
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/* Display 8 bytes as a series of 16-bit hex digits */ 
char * 
put8 (out, s) 
char *out; 
char *s; 
{ 
sprintf (out, "%02X%02X %02X%02X %02X%02X %02X%02X", 
s[0] & Oxff,s[1] & Oxff,s[2] € Oxff, 
s[3] & Oxff,s[4] & Oxff,s[5] & Oxff, 
s[6] & Oxff,s[7] & Oxff); 
return out; 
) 
#ifdef notdef 
/* Encode 8 bytes in 'cp” as stream of ascii letters. 
* Provided as a possible alternative to btoe() 
Ky 
char * 
btoc (cp) 
char *cp; 
{ 
int i; 
static char out[31]; 


December 1994 


/* code out put by characters 6 bits each added to 0x21 (!)*/ 


for (i=0;i <= 10;1i++) { 
/* last one is only 4 bits not 6*/ 


out [i] = "1"+ extract(cp,6*i,i >= 10 ? 4:6); 


} 
out [i] = "NO"; 
return (out); 

} 

Hendif 


/* Internal subroutines for word encoding/decoding */ 


/* Dictionary binary search */ 
static int 

wsrch (w, low, high) 

char *w; 

int low, high; 

{ 


int i,j; 
for(;;){ 
i = (low + high) /2; 
if((j = strncmp (w, We[i],4)) == 0) 
return i; /* Found it */ 
if (high == low+1)( 
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/* Avoid effects of integer truncation in /2 */ 
if (strncmp (w, Wp[high],4) == 0) 
return high; 
else 
return -1; 
} 
if (low >= high) 
return -1; 
/* I don’t *think* this can happen...*/ 
if(j < O) 
high = i; /* Search lower half */ 
else 
low = i; /* Search upper half */ 
} 
} 
static void 
insert(s, x, start, length) 
char *s; 
int x; 
int start, length; 
{ 
unsigned char cl; 
unsigned char cc; 
unsigned char cr; 
unsigned long y; 
int shift; 


assert (length <= 11); 


( 
assert (start >= 0); 
assert (length >= 0); 
assert (start +length <= 66); 
shift = ((8 -(( start + length) $ 8))$8); 


y = (long) x << shift; 
cl (y >> 16) £ Oxff; 
ce (y >> 8) & Oxff; 

cr = y € Oxff; 

if (shift + length > 16) { 


s[start /8] |= cl; 

s[start/8 +1] |= cc; 

s[start/8 +2] |= cr; 
) else if (shift +length > 8)( 

s[start/8] |= cc; 

s[start/8 + 1] |= cr; 
} else ( 

s[start/8] |= cr; 


} 
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static void 
standard (word) 
register char *word; 
{ 
while (*word) í 
if (!isascii (*word) ) 
break; 
if (islower (*word) ) 
*word = toupper (*word) ; 


if (*word == '1') 
*word = 'L”; 
if (*word == '0') 
*word = '0'; 
if (*word == '5') 
*word = 'S'; 
word++; 


} 


/* Extract 'length” bits from the char array 's' 
starting with bit ’start’ */ 

static unsigned long 

extract(s, start, length) 

char *s; 

int start, length; 

{ 
unsigned char cl; 
unsigned char cc; 
unsigned char cr; 
unsigned long x; 


assert 
assert 
assert 
assert 


length <= 11); 

start >= 0); 

length >= 0); 

start +length <= 66); 


anana 


cl = s[start/8]; 


cc = s[start/8 +1]; 

cr = s[start/8 +2]; 

x = ((long) (cl<<8 | cc) <<8 | er) ; 

x = x >> (24 - (length + (start %8))); 
x =( x & (Oxffff >> (16-length) ) ); 


return(x); 
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Appendix B - Source for 128-bit key to/from English words (convert.c) 


/* convert.c -- Wrapper to S/Key binary-to-English routines. 
Daniel L. McDonald -- U. S. Naval Research Laboratory. */ 


finclude <string.h> 
/* eng2key() assumes words must be separated by spaces only. 
eng2key() returns 


1 if succeeded 
0 if word not in dictionary 
-1 if badly formed string 
-2 if words are okay but parity is wrong. 
(see etob() in S/Key) 
El 


int eng2key (keyout, eng) 
char *keyout, *eng; 
{ 
int rc=0,state=1; 
char *eng2; 


/* Find pointer to word 7. */ 


for (eng2 = eng; rc<7 && (*(++eng2) != 'X0'); ) 
if (*eng2 != ' ') 
{ 
rc += state; 
state = 0; 
) 


else state=1; 


if ( (rc = etob(keyout,eng)) != 1) 
return rc; 


rc = etob(keyout+8,eng2); 


return rc; 


} 


/* key2eng() assumes string referenced by 
engout has at least 60 characters 
(4*12 + 11 spaces + ’\0’) of space. 


key2eng() returns pointer to engout. 
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#7 


char *key2eng(engout, key) 
char *engout, *key; 
{ 
btoe (engout, key); 
strcat (engout," "); 
btoe (engout+strlen(engout),key+8); 
return engout; 
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